ExMan Privacy Policy
Effective Date: October 18, 2025
Last Updated: October 18, 2025
Introduction
Welcome to ExMan ("we," "our," or "us"). ExMan is an enterprise expense management application that helps organizations track, approve, and manage business expenses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
By using ExMan, you agree to the collection and use of information in accordance with this policy.
─────────────────────────────────────
Information We Collect
1. Personal Information
We collect the following personal information:
• Name and email address (for account registration)
• Organization details (company name, department)
• User role and position within your organization
• Profile information you provide
2. Expense Data
• Expense amounts and descriptions
• Dates and categories of expenses
• Receipt images and attachments
• Payment method information
• Approval status and comments
3. Technical Information
• Device information (device model, operating system)
• Firebase Cloud Messaging (FCM) tokens for push notifications
• App usage statistics and crash reports
• Login timestamps and activity logs
4. Third-Party Authentication
When you use Google Sign-In:
• Google account email
• Basic profile information (name, profile picture)
─────────────────────────────────────
How We Use Your Information
We use the collected information for:
• Providing and maintaining the ExMan service
• Managing your user account and authentication
• Processing and tracking expense submissions
• Enabling approval workflows and notifications
• Generating expense reports and analytics
• Sending push notifications about expense status changes
• Improving app functionality and user experience
• Providing customer support
• Detecting and preventing fraud or unauthorized access
─────────────────────────────────────
Data Storage and Security
1. Infrastructure
• All data is stored securely on Supabase servers (ISO 27001 certified)
• Supabase infrastructure is hosted on AWS with enterprise-grade security
• Database located in [specify your Supabase region]
2. Security Measures
• Data encryption in transit (TLS/HTTPS)
• Data encryption at rest
• Secure authentication using Supabase Auth
• Role-based access control (RBAC)
• Regular security audits and updates
3. Retention
• Your data is retained as long as your account is active
• Expense records are retained according to your organization's policy
• You may request deletion of your data at any time
─────────────────────────────────────
Third-Party Services
ExMan integrates with the following third-party services:
1. Supabase (https://supabase.com)
• Purpose: Database, authentication, and backend services
• Data shared: All app data (as described above)
• Privacy Policy: https://supabase.com/privacy
2. Firebase Cloud Messaging (https://firebase.google.com)
• Purpose: Push notifications
• Data shared: Device tokens, notification preferences
• Privacy Policy: https://policies.google.com/privacy
3. Google Sign-In (https://developers.google.com/identity)
• Purpose: Authentication
• Data shared: Email, name, profile picture
• Privacy Policy: https://policies.google.com/privacy
─────────────────────────────────────
Data Sharing and Disclosure
We do not sell your personal information.
We share your information only in these circumstances:
• Within your organization: With users who have appropriate permissions (managers, accountants, admins)
• Service providers: With Supabase and Firebase as described above
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or asset sale (you will be notified)
─────────────────────────────────────
Your Rights and Choices
You have the right to:
• Access your personal information
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data
• Opt-out of push notifications (via app settings or device settings)
• Revoke third-party authentication access
To exercise these rights, contact us at [YOUR_EMAIL]
─────────────────────────────────────
Children's Privacy
ExMan is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
─────────────────────────────────────
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
─────────────────────────────────────
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending an in-app notification for material changes
─────────────────────────────────────
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: [ribhu.systems@gmail.com]
App: ExMan - Expense Management
Organization: Ribhu Systems
─────────────────────────────────────
Consent
By using ExMan, you consent to this Privacy Policy and agree to its terms.